Hey 👋
This is Max’s (aka w2w) blog dedicated to security research and white hat hacking
Bugs showcase #2: Privilege escalation using improper preservation of permissions during the OAuth app installation
‎
Bugs showcase #1: Chaining a lack of values correlation, linear growth of attempts, and other omissions in OTP implementations to achieve 2 ATOs
This post describes two account takeover vulnerabilities w/o user interaction resulting from multiple omissions in the OTP implementations.
Multi-factor authentication security testing and possible bypasses
This post contains 11 methods of MFA bypassing
Exploitaiton of Cookie-Based XSS vulnerabilities
A guide on how to exploit Cookie-Based XSS bugs
Disclosure of 5 million links to the Telegram private chats and the possibility of editing any article on Telegra.ph
‎
How I hacked cryptocurrency-related companies
A tale of 7 vulnerabilities on services related to the cryptocurrency